InsightsSecurity

SMS and voice calls for MFA go away on February 1, 2027

Microsoft's own SMS and voice codes for sign-in are being phased out. Businesses that still use them need to act now.

What does the change mean?

Microsoft is phasing out its own SMS and voice verification in all Entra ID tenants by February 1, 2027. After that, users will no longer be able to use SMS or voice calls to complete multi-factor authentication (MFA) and sign in.

Microsoft says these methods are vulnerable to phishing, interception, and manipulation.

If you need to keep phone-based sign-in

Businesses with a genuine need for phone-based sign-in can connect a third-party telephony provider through Microsoft Security Store. There is also a temporary option to postpone the rollout – but that should be an exception, not a plan.

What we recommend

  • List the users who rely on SMS or voice today
  • Move them to passkeys or Microsoft Authenticator
  • Finish well ahead of February 2027

How we can help

Wondering what this means for your organization? Let's talk.

Request a meeting →

Read next

All articles →

Need an IT provider that understands your business?

Tell us a little about your business and what you need help with, and we'll reach out to schedule a no-obligation conversation.

Or call +47 977 99 889, or email post@iqonic.no.

post@iqonic.no